diff --git a/jupyterhub/roles.py b/jupyterhub/roles.py
index defa187d..75545a9a 100644
--- a/jupyterhub/roles.py
+++ b/jupyterhub/roles.py
@@ -45,6 +45,7 @@ def get_default_roles():
                 'access:services',
                 'access:servers',
                 'read:roles',
+                'read:metrics',
             ],
         },
         {